add very basic auth for deployment